medium 5.5

CVE-2019-15924 json

An issue was discovered in the Linux kernel before 5.0.11.

published 2019-09-04 7y ago modified 2026-06-17 4mo ago also EUVD-2019-6828

cvss: 5.5; version 3.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.5%; EPSS 0.5% chance of exploitation in 30 days, percentile 44%
public exploits: 0; none known

An issue was discovered in the Linux kernel before 5.0.11. fm10k_init_module in drivers/net/ethernet/intel/fm10k/fm10k_main.c has a NULL pointer dereference because there is no -ENOMEM upon an alloc_workqueue failure.

Patch / fix

fixed in 1 distros 5 links 1

linux linux_kernel 5.0.11

debian ubuntu red hat suse opensuse

linux Debian 14, Debian 13, Debian 12 5.2.6-1

debian advisories DEBIAN-CVE-2019-15924

linux Ubuntu 18.04 LTS 4.15.0-60.67
linux-aws Ubuntu 18.04 LTS 4.15.0-1047.49
linux-gcp Ubuntu 16.04 LTS 4.15.0-1041.43
linux-gcp Ubuntu 18.04 LTS 4.15.0-1042.45
linux-hwe Ubuntu 16.04 LTS 4.15.0-60.67~16.04.1
linux-hwe Ubuntu 18.04 LTS 5.0.0-23.24~18.04.1
linux-kvm Ubuntu 18.04 LTS 4.15.0-1043.43
linux-oem Ubuntu 18.04 LTS 4.15.0-1056.65

ubuntu advisories UBUNTU-CVE-2019-15924

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

kernel RHEL 8 4.18.0-147.el8
perf RHEL 8 4.18.0-147.el8
bpftool RHEL 8 4.18.0-147.el8
kernel-core RHEL 8 4.18.0-147.el8
kernel-tools RHEL 8 4.18.0-147.el8
python3-perf RHEL 8 4.18.0-147.el8
kernel-modules RHEL 8 4.18.0-147.el8
kernel-zfcpdump RHEL 8 4.18.0-147.el8

red hat advisories RHSA-2019:3517 RHSA-2019:3309

kernel-syms SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +1 more 4.4.121-92.125.1
kernel-source SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +1 more 4.4.121-92.125.1
kernel-default SLES for SAP 12 SP2, SLES 12 SP2-LTSS, SLES 12 SP2-BCL +2 more 4.4.121-92.125.1
kgraft-patch-SLE12-SP2_Update_33 SLES for SAP 12 SP2, SLES 12 SP2-LTSS, OpenStack Cloud 7 1-3.5.1
kernel-syms SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +4 more 4.4.180-94.107.1
kernel-source SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +4 more 4.4.180-94.107.1
kernel-default SLES for SAP 12 SP3, SLES 12 SP3-LTSS, SLES 12 SP3-BCL +5 more 4.4.180-94.107.1
kgraft-patch-SLE12-SP3_Update_29 SLES for SAP 12 SP3, SLES 12 SP3-LTSS, OpenStack Cloud Crowbar 8 +3 more 1-4.3.1

suse advisories SUSE-SU-2019:2984-1 SUSE-SU-2019:2949-1 SUSE-SU-2019:2756-1 SUSE-SU-2019:2738-1 SUSE-SU-2019:2658-1 SUSE-SU-2019:2651-1

kernel-syms openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-obs-qa openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-source openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-default openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-vanilla openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-kvmsmall openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-obs-build openSUSE Leap 15.1 4.12.14-lp151.28.16.1
kernel-syms openSUSE Leap 15.0 4.12.14-lp150.12.73.1

opensuse advisories openSUSE-SU-2019:2181-1 openSUSE-SU-2019:2173-1

github.com/torvalds/linux@01ca667 commit

Is CVE-2019-15924 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2019-15924 updated 2026-11-06 cvss 5.5

kernel: null pointer dereference in drivers/net/ethernet/intel/fm10k/fm10k_main.c

Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, kernel-alt, python-perf, +9 more
affected: workaround, no fix available, no fix planned “To mitigate this issue, prevent module fm10k from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.”
Red Hat Enterprise MRG 2 kernel-rt, mrg-rt-release, kernel-rt-trace, kernel-rt-vanilla, kernel-rt-firmware
affected: workaround, no fix planned “To mitigate this issue, prevent module fm10k from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.”
Red Hat CodeReady Linux Builder (v. 8) kernel-debuginfo-common-x86_64 4.18.0-147.el8, kernel-debuginfo-common-aarch64 4.18.0-147.el8, kernel-debuginfo-common-ppc64le 4.18.0-147.el8 Red Hat Enterprise Linux BaseOS (v. 8) perf 4.18.0-147.el8, kernel 4.18.0-147.el8, bpftool 4.18.0-147.el8, kernel-core 4.18.0-147.el8, kernel-tools 4.18.0-147.el8, python3-perf 4.18.0-147.el8, +15 more
fixed: vendor fix “To mitigate this issue, prevent module fm10k from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.” RHSA-2019:3517
Red Hat Enterprise Linux Real Time (v. 8) kernel-rt 4.18.0-147.rt24.93.el8, kernel-rt-core 4.18.0-147.rt24.93.el8, kernel-rt-modules 4.18.0-147.rt24.93.el8, kernel-rt-debug-core 4.18.0-147.rt24.93.el8, kernel-rt-debug-modules 4.18.0-147.rt24.93.el8, kernel-rt-modules-extra 4.18.0-147.rt24.93.el8, +2 more Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt 4.18.0-147.rt24.93.el8, kernel-rt-kvm 4.18.0-147.rt24.93.el8, kernel-rt-core 4.18.0-147.rt24.93.el8, kernel-rt-modules 4.18.0-147.rt24.93.el8, kernel-rt-debug-kvm 4.18.0-147.rt24.93.el8, kernel-rt-debug-core 4.18.0-147.rt24.93.el8, +4 more
fixed: vendor fix “To mitigate this issue, prevent module fm10k from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.” RHSA-2019:3309
Red Hat Enterprise Linux 5 kernel Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.52% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

github.com https://github.com/torvalds/linux/commit/01ca667133d019edc9f0a1f70a272447c84ec41f referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	3.0	5.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD	2.0	4.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness

CWE-476 NULL Pointer Dereference

Technology feeds

Linux kernel rss critical rss

References

github.com /torvalds/linux/commit/01ca667133d019edc9f0a1f70a272447c84ec41f
exploit, patch, third-party-advisory
lists.opensuse.org /opensuse-security-announce/2019-09/msg00064.html
vendor-advisory
lists.opensuse.org /opensuse-security-announce/2019-09/msg00066.html
vendor-advisory
cdn.kernel.org /pub/linux/kernel/v5.x/ChangeLog-5.0.11
mailing-list, vendor-advisory
lists.debian.org /debian-lts-announce/2019/09/msg00014.html
mailing-list
lists.debian.org /debian-lts-announce/2019/09/msg00015.html
mailing-list
security.netapp.com /advisory/ntap-20191004-0001/

Sources

CVE List CVE-2019-15924
NVD CVE-2019-15924

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

json all entries feed